<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: arial,helvetica,sans-serif; font-size: 10pt; color: #000000'>Hi,<br><br>I'm trying to authorize users in different AD's (2003 and 2008), but I keep running into an error I can't find any thing on when I google it.<br><br>For the purpose of the testing I have set the following in the ldap section: require_cert<br><br>Freeradius tries to connect to the ldap server (2008), the connection fails and I get the following debug output.<br><br>============================ DEBUG =======================================<br>[ldap_CustA] performing user authorization for MyAccount<br>[ldap_CustA] expand: (&(sAMAccountName=%{User-Name})) -> (&(sAMAccountName=MyAccount))<br>[ldap_CustA] expand: ou=OU1,ou=OU2,dc=domain,dc=local -> ou=OU1,ou=OU2,dc=domain,dc=local<br> [ldap_CustA] ldap_get_conn: Checking Id: 0<br> [ldap_CustA] ldap_get_conn: Got Id: 0<br> [ldap_CustA] attempting LDAP reconnection<br> [ldap_CustA] (re)connect to AD-IP-ADDRESS:636, authentication 0<br> [ldap_CustA] setting TLS mode to 1<br> [ldap_CustA] setting TLS CACert File to /etc/raddb/certs/ca.pem<br> [ldap_CustA] setting TLS CACert Directory to /etc/raddb/certs/<br> [ldap_CustA] setting TLS Require Cert to never<br> [ldap_CustA] setting TLS Cert File to /etc/raddb/certs/server.crt<br> [ldap_CustA] setting TLS Key File to /etc/raddb/certs/server.key<br> [ldap_CustA] setting TLS Key File to /etc/raddb/certs/random<br> [ldap_CustA] bind as user@domain.local/PASSWORD to 193.47.81.75:636<br>TLS: could not add the certificate PEM Token #0:server.crt - 0 - error -8192:Unknown code ___f 0.<br>TLS: error: could not initialize moznss security context - error -8192:Unknown code ___f 0<br>TLS: can't create ssl handle.<br>===========================================================================<br><br>======================= CONFIG SNIP =========================================<br> tls {<br> start_tls = no<br><br> cacertfile = /etc/raddb/certs/ca.pem<br> cacertdir = /etc/raddb/certs/<br> certfile = /etc/raddb/certs/server.crt<br> keyfile = /etc/raddb/certs/server.key<br> randfile = /etc/raddb/certs/random<br><span style="white-space:pre"> </span>require_cert = "never"<br>}<br>===========================================================================<br><br><br>I'm wondering why the random file is set as a TLS Key, and also what exactly is going wrong since I get the error for the PEM Token?<br><br><br>Thank you for your help.<br><br>-- <br>Thanks for your help<br>Frank<br></div></body></html>